Self-Hosted Applications¶

The selfhosted namespace contains a variety of productivity tools, dashboards, and utility services. Most are deployed using the bjw-s app-template Helm chart and connect to Envoy Gateways via HTTPRoute resources.

Application Catalog¶

Application Details¶

Cryptgeon¶

Cryptgeon provides encrypted, self-destructing notes and file sharing. Messages are encrypted client-side and stored in a Valkey (Redis-compatible) sidecar.

• Image: cupcakearmy/cryptgeon:2.9.1
• Sidecar: valkey/valkey:8.1 for ephemeral encrypted data storage
• Size limit: 100 MB per note

Echo Server¶

HTTP Echo Server returns request headers, body, and metadata. Useful for debugging Envoy Gateway routing, TLS termination, and header injection.

• Image: ghcr.io/mendhak/http-https-echo:39

Excalidraw¶

Excalidraw is an open-source collaborative whiteboard tool for sketching diagrams and illustrations.

• Image: docker.io/excalidraw/excalidraw:latest
• Storage: emptyDir only (stateless)

Glance¶

Glance is a self-hosted dashboard with configurable widgets for RSS feeds, weather, bookmarks, and system monitoring.

• Image: docker.io/glanceapp/glance:v0.8.4
• Configuration: ConfigMap glance-config mounted as /config/glance.yml

Homepage¶

Homepage is a Kubernetes-aware application dashboard that auto-discovers services and displays their status.

• Image: ghcr.io/gethomepage/homepage:v1.9.0
• Configuration: ConfigMap homepage-config with multiple YAML files (bookmarks, services, settings, widgets)
• RBAC: ServiceAccount with cluster read permissions for Kubernetes service discovery

House Hunter¶

House Hunter is a custom property search aggregator backed by PostgreSQL.

• Image: ghcr.io/swibrow/house-hunter:latest
• Database: PostgreSQL (CloudNative-PG house-hunter cluster)

Miniflux¶

Miniflux is a minimalist, opinionated RSS feed reader with a clean interface.

• Image: ghcr.io/miniflux/miniflux:2.2.17-distroless
• Database: PostgreSQL (CloudNative-PG miniflux cluster)
• Polling: Every 15 minutes using entry frequency scheduler

n8n¶

n8n is a workflow automation platform with a visual editor, supporting hundreds of integrations.

• Image: ghcr.io/n8n-io/n8n:2.6.2
• Storage: PVC n8n at /home/node/.n8n
• Webhook URL: https://n8n-webhook.example.com (separate HTTPRoute)
• Timezone: Europe/Zurich

RRDA¶

RRDA is a REST API for DNS record lookups, providing an HTTP interface to DNS queries.

• Image: ghcr.io/swibrow/rrda:1.4.1
• Sidecar: adguard/dnsproxy:v0.78.2 -- DNS-over-HTTPS proxy to bypass the Ubiquiti router's DNS interception on port 53

Sharkord¶

Sharkord is a voice and video communication server that uses WebRTC for real-time media.

• Image: sharkord/sharkord:latest
• Gateway: envoy-external
• Storage: PVC sharkord at /root/.config/sharkord

Tandoor¶

Tandoor Recipes is a recipe management and meal planning application.

• Image: ghcr.io/tandoorrecipes/recipes:2.4.2
• Sidecar: nginx-unprivileged:1.27.4-alpine for serving static files and media
• Database: PostgreSQL (CloudNative-PG tandoor cluster)
• Storage: PVC tandoor-data with subpaths for media, static files, and data

Whoami¶

Whoami is a lightweight HTTP server that returns connection and request information. Useful for testing gateway routing and TLS configuration.

• Image: docker.io/traefik/whoami:v1.11.0

Gateway Distribution¶

pie title Gateway Usage
    "envoy-external" : 11
    "envoy-internal" : 1